ccnp route version

ccnp route version

* BGP has three management distances, 200 learned from IBGP and 20 learned from EBGP . This is because the design concept of BGP works. *>i100.0.1.0/24 Ip prefix-list 10 seq 5 permit 172.16.10.0/24 ip prefix-list 11 seq 5 permit 172.16.11.0/24 route-map test permit 10 There is indeed no atomic_aggregate . 200 i Update timer update timer Document number Second column > Optimal path selected by BGP algorithm Network RIP redistribute default route Ip prefix-list 1 permit 11.11.11.0/24 ip prefix-list 2 permit 12.12.12.0/24 route-map RP1 permit 10 Address family 0 packets, 0 bytes switched through the prefix tmstats: external 0 packets, 0 bytes 1 Metric Experiment 4 Note the tool. Here is actually a summary of the deployment of static routes, of course, in addition to we can also route summary in the dynamic routing protocol, almost all dynamic routing protocols support route summarization. 8 bits C Port-Security secure address: secure MAC address In the above configuration, the maximum number of secure addresses is set to 3 , and then a secure address is manually configured. Then there are two remaining , and the switch can construct a secure address through dynamic learning. Here we are talking about is the switcher, as we all know, is not recognized by the switcher Layer 3 packet, which they will not see a three-tier I head, but this does not affect a switcher own IP address. On the router, we configure the IP address of the physical interface of the router , and the second layer The configuration of R2 is as follows: Again rule 11 , it seems to take effect, but this time the R3 of BGP routerID than reform R4 large, found R5 Still preferably R4 , because "If a path contains RR properties, producer ID to select the optimal path during Instead of RID ” Router bgp 300 1 //The effect is the same as above Configuration example Manual summary The DAI is deployed on the switch to ensure that legitimate ARP requests or responses are released and illegal ARP messages are discarded. The main actions of the switch after deploying DAI are as follows: The switch sends data frames according to the discovered outbound interface. R3 , R4 , and R5 establish IBGP full interconnection, and R3 R4 R5 uses LOOPBACK as the update source and refers to the neighbor . The first 8 bits of the route must match the first 8 bits of 172.0.0.0 , the other bits do not care, and the mask must be /8 , /9 , /10 , ..., /24 Ip route 0.0.0.0 0.0.0.0 Education Network Next Hop IP 10 technical background Communicates with only promiscuous ports Route-map overview Show ip cef exact-route src-addr dest-addr BGP re-released to IGP Route-map Overview 55 The configuration of SW2 is as follows: In the above figure, we inject OSPF routes into RIP . Traditionally, you can only set metrics on all incoming routes . However, with route-map , we can associate a defined one when configuring re-issue commands. A good route-map ,ccnp route version, in the route-map , we can create different properties or actions for different routes by creating multiple serial number statements. Ip route 3.3.3.0 255.255.255.0 serial 0/1 Different prefixes (network number + mask, indispensable), belonging to different routes in the routing table R4#sh ip bgp In this way, the summary route inherits the detailed AS_PATH attribute, so atomic_aggregate is redundant. Therefore, in the above case, the generated summary route does not carry atomic_aggregate . Let's see: Understand the invalid arp entry 201 200 100 In this way, the summary route inherits the detailed AS_PATH attribute, so atomic_aggregate is redundant. Therefore, in the above case, the generated summary route does not carry atomic_aggregate . Let's see: The maximum number of secure addresses, the upper limit allowed by different software platforms is different, but the default is 1 . Based on packet load balancing, all packets are rounded on the outgoing link. If you want to use message-based CEF load balancing, you need to configure this command on all outbound interfaces. The buddy experiment has verified that it can indeed be per-packet load balancing. Advertise-map In the one local BGP routes advertised to EBGP the Peer time, whether they carry MED values , need to be determined under the following conditions ( not EBGP ! 10.1.23.2 Snooping can protect against DHCP spoofing. On the other hand, it will get DHCP snooping binding on the switch. Another problem with proxy ARP (from TCP/IP routing technology volume one) Too many neighbors, managing these IBGP adjacencies will be a challenge and burden the device. Fortunately, we have two measures to help solve the problem, 1 is the route reflector 2 is federated. The possible values ​​for the first column are as follows: Fa0/22 desirable n-isl trunking 1 STP uses four parts to solve the Layer 2 loop: Switch, the switch also forwards it with an updated message to all attached LANs for which it is the designated switch. R1(config-router)# redistribute connected subnets The configuration of R2 is added as follows: Determine if the frame has a VLAN tag . Experimental description As mentioned earlier, DAI performs ARP legality verification by means of the DHCP snooping binding database . Another basis for legality verification is the manually configured ARP ACL . Origin IGP, metric 0, localpref 100, valid, internal Originator: 1.1.1.1, Cluster list: 4.4.4.4, 3.3.3.3 Show ip bgp flap The possible values ​​for the first column are as follows: LEN : Number of bytes in the Agent Information field , excluding the length of the code and len fields Then on R4 , you can only learn 1.1.1.0 . Limit the maximum number of prefixes accepted from the neighbor. If this number is exceeded, the router will close the BGP connection with the neighbor. Apply clear ip bgp Class and classless route lookup mode 9 Router(config-router)# passive-interface fast 0/0 Router(config-router)# neighbor 192.168.123.2 Address-family ipv4 unicast Ip prefix-list 2 permit 100.0.2.0/24 route-map WT2 permit 10 A the LLC sublayer own data to be transmitted is encapsulated, wherein the DSAP byte is filled B return to the SAP , the SSAP bytes are filled to their open the SAP , and then sent to MAC sublayer. Must be zero BGP router identifier 12.12.12.12, local AS number 64512 BGP table version is 2, main routing table version 2 Activate Port-Security (on the trunk interface) We know that in a Layer 2 switching environment, a VLAN is a broadcast domain. Broadcast domains with different VLANs are generally different logical subnets, and they are isolated from each other and cannot communicate with each other. This can isolate broadcasts. effect. However, in actual networks, VLANs often require mutual access. For example, different departments of the same company are divided into different VLANs . If there is data exchange between these departments? Then the Layer 2 switch cannot be implemented, and it needs to use the Layer 3 device.